Certified Ethical Hacker CEH v.13 AI Training Course

Introduction to Ethical Hacking

• Core principles of ethical hacking and information security
• Cybersecurity threats, vulnerabilities, and potential attack surfaces
• Key concepts, phases, and methodologies in ethical hacking
• Information security controls and established security frameworks
• Categorization of hackers, attacks, and attack vectors
• Legal, regulatory, and ethical frameworks
• The role of AI in ethical hacking and cybersecurity
• Concepts of the Cyber Kill Chain and MITRE ATT&CK

Footprinting and Reconnaissance

• Basic principles of reconnaissance
• Techniques for passive and active information gathering
• Identifying target infrastructure and exposed attack surfaces
• Conducting reconnaissance via search engines
• Utilizing WHOIS, DNS, and IP intelligence
• Footprinting websites and organizational structures
• Reconnaissance through email and social media
• Discovering cloud and network infrastructure
• Application of OSINT tools and techniques
• Reconnaissance and data analysis assisted by AI

Scanning Networks

• Concepts and methodologies in network scanning
• Discovering hosts and scanning ports
• Scanning using TCP, UDP, and ICMP protocols
• Identifying services and operating systems
• Banner grabbing techniques
• Mapping networks and discovering topology
• Conducting vulnerability scans
• Considerations for firewalls and IDS
• Using scanning tools and implementing automation
• Network analysis assisted by AI

Enumeration

• Core concepts and techniques of enumeration
• Enumeration processes on Windows and Linux
• Enumerating NetBIOS and SMB services
• SNMP enumeration techniques
• Enumerating LDAP and directory services
• Enumerating DNS and SMTP services
• Enumerating users, groups, and shared resources
• Reconnoitering Active Directory
• Countermeasures to enumeration
• Techniques for automated enumeration

Vulnerability Analysis

• Methodologies for vulnerability assessment
• Identifying and classifying vulnerabilities
• Working with CVE, CVSS, and vulnerability databases
• Scanning for network and system vulnerabilities
• Assessing web and application vulnerabilities
• Considerations for cloud and container vulnerabilities
• Prioritizing vulnerabilities and analyzing risk
• Identifying false positives and validating findings
• Managing the vulnerability lifecycle
• Vulnerability analysis and prioritization assisted by AI

System Hacking

• Methodologies for system hacking
• Executing password and credential attacks
• Techniques for password cracking
• Exploiting authentication and authorization weaknesses
• Escalating privileges
• Fundamentals of exploitation
• Maintaining persistent access
• Techniques for hiding files and system artifacts
• Covering tracks
• Post-exploitation activities on Windows and Linux
• Exploitation and attack-path analysis assisted by AI

Malware Threats

• Concepts and classifications of malware
• Viruses, worms, Trojans, ransomware, and spyware
• Fileless and polymorphic malware types
• Rootkits and backdoors
• Mechanisms for malware delivery
• Understanding Command-and-Control structures
• Fundamentals of malware analysis
• Techniques for evading anti-malware tools
• Detecting and preventing malware
• AI-enabled malware and defensive countermeasures

Sniffing

• Basics of network sniffing
• Capturing packets and analyzing traffic
• Passive and active sniffing methods
• Analyzing network protocols
• ARP poisoning and MAC address attacks
• Attacks based on DNS and DHCP
• Intercepting credentials
• Understanding Man-in-the-Middle attacks
• Countermeasures against sniffing
• Ensuring secure network communication
• Packet and traffic analysis assisted by AI

Social Engineering

• Principles of social engineering
• Attacks targeting humans and technical systems
• Phishing, spear phishing, and whaling
• Vishing, smishing, and other communication-based attacks
• Impersonation and pretexting tactics
• Baiting and physical social engineering
• The social engineering attack lifecycle
• Awareness campaigns and security testing
• Strategies for detection and prevention
• AI-generated phishing and social engineering threats

Denial-of-Service

• Fundamentals of DoS and DDoS attacks
• Various types of denial-of-service attacks
• Attacks at the network and application layers
• Exhausting system resources
• Distributed attack infrastructure
• Botnets and amplification techniques
• Detecting and monitoring DDoS attacks
• Mitigation and prevention strategies
• Incident response procedures for DoS attacks
• Attack detection and response assisted by AI

Session Hijacking

• Basics of session management
• Session identification and authentication
• Techniques for session hijacking
• Attacks on cookies and tokens
• Hijacking TCP/IP sessions
• Attacks on browser and web sessions
• Man-in-the-middle attacks
• Session fixation
• Controlling session security
• Techniques for detection and mitigation

Evading IDS, Firewalls, and Honeypots

• Intrusion detection and prevention systems
• Firewall architectures and technologies
• Honeypots and deception technologies
• Monitoring network security
• Concepts for evading IDS/IPS
• Techniques for evading firewalls
• Traffic fragmentation and obfuscation
• Using proxies and tunneling
• Detecting honeypots and applying countermeasures
• Defensive monitoring and system hardening
• Anomaly detection and adaptive defense assisted by AI

Hacking Web Servers

• Web server architecture and underlying technologies
• Footprinting web servers
• Enumerating web server components
• Common vulnerabilities in web servers
• Misconfigurations and insecure default settings
• Weaknesses in authentication and access control
• Directory traversal and associated attacks
• Concepts of web server attacks and exploitation
• Hardening web servers
• Managing patches and configurations
• Monitoring web servers and responding to incidents

Hacking Web Applications

• Architecture of web applications
• Attack surfaces in web applications
• Vulnerabilities on client and server sides
• Attacks targeting authentication and authorization
• Vulnerabilities in session management
• Weaknesses in input validation
• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)
• File inclusion and upload vulnerabilities
• Fundamentals of API security
• Methodologies for web application security testing
• Secure coding and mitigation techniques
• Web application security testing assisted by AI

SQL Injection

• Fundamentals of databases and SQL
• Concepts and vectors of SQL injection
• Concepts for bypassing authentication
• Error-based, union-based, and blind SQL injection
• Fingerprinting databases
• Concepts for data extraction
• Methodologies for testing SQL injection
• Automated assessment of SQL injection
• Preventing SQL injection
• Using parameterized queries and input validation
• Monitoring database security
• SQL injection detection and analysis assisted by AI

Hacking Wireless Networks

• Fundamentals of wireless networking
• Wi-Fi standards and security protocols
• Conducting wireless reconnaissance
• Discovering wireless networks
• Weaknesses in authentication and encryption
• Analyzing wireless traffic
• Rogue access points and evil-twin setups
• Wireless denial-of-service concepts
• Basics of Bluetooth security
• Methodologies for wireless security testing
• Hardening and monitoring wireless networks
• Configuring secure wireless environments

Hacking Mobile Platforms

• Security architecture for mobile devices
• Security concepts for Android and iOS
• Attack surfaces in mobile applications
• Reconnaissance of mobile applications
• Insecure data storage practices
• Weaknesses in authentication and authorization
• Securing mobile communications
• Securing APIs and backends
• Threats from mobile malware
• Testing mobile application security
• Implementing mobile device security controls
• Hardening mobile applications

IoT and OT Hacking

• Fundamentals of IoT and OT security
• IoT architecture and communication protocols
• Discovering and reconnoitering IoT devices
• IoT vulnerabilities and misconfigurations
• Security of firmware and hardware
• IoT authentication and access control
• Industrial Control Systems and OT environments
• Basics of SCADA security
• OT attack surfaces and associated risks
• Assessing IoT/OT vulnerabilities
• Defensive monitoring and network segmentation
• Secure IoT and OT architectures
• IoT and OT security considerations enabled by AI

Cloud Computing

• Basics of cloud computing
• Cloud service and deployment models
• Cloud architecture and shared responsibility
• Cloud reconnaissance and attack surfaces
• Managing identity and access
• Securing cloud storage and databases
• Securing virtualization and containers
• Addressing cloud misconfigurations
• Cloud network security
• Concepts of cloud privilege escalation
• Assessing cloud vulnerabilities
• Logging and monitoring in the cloud
• Responding to cloud incidents
• Cloud security analysis assisted by AI

Cryptography

• Fundamentals and terminology of cryptography
• Symmetric and asymmetric encryption
• Hashing and ensuring message integrity
• Digital signatures and certificates
• Public Key Infrastructure (PKI)
• Key management and cryptographic protocols
• Common cryptographic vulnerabilities
• Password hashing and secure authentication
• Security concepts in SSL/TLS
• Cryptographic attacks and weaknesses
• Best practices for implementing encryption
• Cryptography in cloud, mobile, and IoT contexts
• Emerging security considerations related to cryptography and AI